Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File:                     g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier:          FGUPgYhbS64St9nWwsESgCK0HbGqKlb5ZvsVfxQ686U=
Subject key identifier:   00:2F:52:62:33:BC:46:54:3F:B3:AB:63:67:3B:58:90:27:2D:7C:19
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer:       /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial:       01962F7422D2A0FE304E08075E3889945A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number:          0696
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: 4AO6bfn251AjnmEStmJrRQx782S/Dv/ioszvrFlA6Xk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:22:d2:a0:fe:30:4e:08:07:5e:38:89:94:5a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=002f526233bc46543fb3ab63673b5890272d7c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:e9:c5:be:bc:50:90:75:df:e8:50:dc:0f:
                    11:1a:ec:06:23:81:f1:8b:e2:3c:ea:94:e5:42:f0:
                    3a:8d:c8:bc:6d:5a:2f:8b:3d:39:c7:62:79:d0:72:
                    a6:ed:01:22:cd:8f:ec:22:da:54:42:45:7d:2f:16:
                    17:7d:fb:5e:4f:79:93:1e:df:04:7e:98:6a:0e:a4:
                    83:b5:23:e5:62:da:d3:aa:6a:f4:b1:be:82:d4:27:
                    a3:50:7f:e4:d9:97:91:af:9f:4c:c0:81:6b:a0:b3:
                    b3:f4:1b:c8:8d:52:fe:3a:c9:d0:78:0e:ce:a6:ab:
                    0d:c7:49:13:ac:48:9a:cb:02:68:4e:ab:fb:1a:ce:
                    19:17:b0:e7:04:68:dd:b4:c9:0c:59:3a:f2:8b:d1:
                    9a:b3:05:07:66:72:88:4b:2c:66:4e:3a:e6:bf:2e:
                    5f:fe:75:c5:d4:61:0a:a4:6c:7b:5d:20:7c:0c:e9:
                    94:36:32:24:87:53:56:56:ee:cf:5e:42:23:3d:23:
                    3d:4b:72:a8:d0:9d:96:34:3f:6c:3a:e6:c2:55:80:
                    f9:e3:6a:2e:be:3d:d2:b8:af:44:31:7e:de:1d:05:
                    c0:0f:9e:bf:a6:9b:04:93:d8:9d:bf:5c:10:fb:5a:
                    8a:c8:49:1d:b8:ce:d7:07:d4:a2:07:42:b1:fb:17:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2F:52:62:33:BC:46:54:3F:B3:AB:63:67:3B:58:90:27:2D:7C:19
            X509v3 Authority Key Identifier:
                keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:56:db:30:d2:b2:bb:98:7c:12:be:b0:ea:da:28:4b:bf:ff:
         d8:f5:b8:a4:da:fc:07:ec:35:11:af:3e:fe:57:5c:10:90:53:
         d7:68:27:30:98:a1:d0:f8:4f:ad:3d:d1:91:c4:ec:fc:3c:9c:
         9e:79:60:48:1d:82:a8:6a:d5:b2:fe:07:ad:5b:96:f2:3a:13:
         a6:c8:34:92:43:06:5d:31:88:1c:ef:bf:a3:8a:2d:df:90:3b:
         7d:58:dd:d8:2e:1f:33:92:f9:4d:ff:87:8a:6d:21:f5:8b:10:
         2d:74:35:a1:b7:45:d5:7b:51:39:cd:38:4d:7b:d5:00:d2:57:
         3f:01:69:af:65:30:7a:97:c5:d9:ed:64:13:e1:dd:8d:b1:a7:
         02:07:b0:06:6b:2d:b1:2a:0f:d5:8d:0d:19:9e:d2:a1:3e:d3:
         f2:67:ad:bf:4c:61:e5:d9:58:60:27:3d:0c:51:8f:5b:81:5a:
         e8:ae:4c:9e:bf:05:85:bd:38:0a:31:81:8f:9a:e0:de:68:8e:
         f7:8a:85:6b:62:8e:9e:dd:4b:ed:d1:73:23:81:68:31:69:63:
         55:4e:05:50:6d:3c:fd:c5:fc:d4:8c:ba:17:8b:56:a1:62:c3:
         0d:c7:24:0c:36:37:4b:17:53:99:7a:be:b4:3d:c6:31:61:c5:
         b2:8a:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----